Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um Sitzungen anderer Benutzer zu übernehmen und um Informationen offenzulegen.
Product
IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.
Vulnerabilities 2
-
Medium 6.3
IBM InfoSphere Information Server session fixation
IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
-
Medium 4.3
IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system.
Revision history
-
#1
Initiale Fassung
References
-
IBM Security Bulletin 7229921 vom 2025-04-23
https://www.ibm.com/support/pages/node/7229921
-
IBM Security Bulletin 7231332 vom 2025-04-23
https://www.ibm.com/support/pages/node/7231332